CVE-2022-24628

7.2 highEPSS 1.2%

High (7.2) in audiocodes device manager express. EPSS 1.2% chance of exploitation in the next 30 days.

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. It is authenticated SQL injection in the id parameter of IPPhoneFirmwareEdit.php.

Severity

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2023-05-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

audiocodes:device_manager_express

References

http://seclists.org/fulldisclosure/2023/Feb/12
http://seclists.org/fulldisclosure/2023/Feb/12

Check your stack JSON